quintcs2hackvshack[.]net[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
quintcs2hackvshack.net.dll
Size 14.0MB
Sample260703-egy97sf13n
SHA256 4d7e0f6c1b5b88b673c8a7606bb2f0f5109abd1010c3d71174ceb5c53fb481cc
MD5 8302515b9da3b08f78eb2c7f36932c36
SHA1 933dfa31c3bd2e1768dd7d51d0ab1722922fa735
SHA512 8ef9fc800b4f9f0a6932d850660ec641db02f57f44f8d1da4af014f0d37e5107e491072222a095f860a7002ed81a030b87a7cd560b5f4e96318053f087b88d33
SSDEEP 49152:quh2UNXFtTa7zhR5316uGxz9Rv7Sj73ojI2qg11eH7LcEX85OUZvtfsiPT5ZTofv:quO9bLd7rQgmAUNwkdGuTHrcfTi8B2
TLSH
T11BE6F81972791490DAA5C0B8E90353A7FDA07075533D65FBA29086C5EF322FCD6BCB22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
quintcs2hackvshack.net.dll

File Explorer

quintcs2hackvshack.net.dll

.dll 14.0MB

quintcs2hackvshack.net.dll

IMPHASH 01c2257fdf30f0781a8c78f14cb2e9aa
SHA256 4d7e0f6c1b5b88b673c8a7606bb2f0f5109abd1010c3d71174ceb5c53fb481cc
MD5 8302515b9da3b08f78eb2c7f36932c36
SHA1 933dfa31c3bd2e1768dd7d51d0ab1722922fa735
SHA512 8ef9fc800b4f9f0a6932d850660ec641db02f57f44f8d1da4af014f0d37e5107e491072222a095f860a7002ed81a030b87a7cd560b5f4e96318053f087b88d33
SSDEEP 49152:quh2UNXFtTa7zhR5316uGxz9Rv7Sj73ojI2qg11eH7LcEX85OUZvtfsiPT5ZTofv:quO9bLd7rQgmAUNwkdGuTHrcfTi8B2
TLSH
T11BE6F81972791490DAA5C0B8E90353A7FDA07075533D65FBA29086C5EF322FCD6BCB22
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5170827

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\kamis\Desktop\yougey-main\x64\Debug\quintcs2.pdb

ntdll

RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind RtlPcToFileHeader RtlUnwindEx RtlUnwind NtAllocateVirtualMemory NtProtectVirtualMemory VerSetConditionMask

kernel32

QueryPerformanceFrequency FreeLibrary GetModuleHandleA GetProcAddress LoadLibraryA GetLocaleInfoA GetCurrentProcess GetSystemInfo VirtualFree VirtualQuery CloseHandle HeapCreate HeapDestroy HeapAlloc HeapReAlloc HeapFree Sleep GetCurrentProcessId GetCurrentThreadId OpenThread SuspendThread ResumeThread GetThreadContext SetThreadContext FlushInstructionCache GetModuleHandleW CreateToolhelp32Snapshot Thread32First Thread32Next GetModuleFileNameA GetConsoleWindow AllocConsole SetConsoleTitleA CreateThread CreateFileA GetFileSizeEx ReadFile QueryPerformanceCounter MapViewOfFile UnmapViewOfFile CreateFileMappingA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage HeapQueryInformation SetConsoleCtrlHandler OutputDebugStringW SetFilePointerEx ReadConsoleW GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers GetCurrentThread EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW FlsFree FlsSetValue FlsGetValue FlsAlloc ExitProcess WriteConsoleW GetFileType GetStdHandle WideCharToMultiByte MultiByteToWideChar GlobalFree GlobalLock HeapValidate HeapSize GlobalUnlock GlobalAlloc SetEnvironmentVariableW SetStdHandle GetTimeZoneInformation GetProcessHeap SetUnhandledExceptionFilter GetModuleHandleExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError LoadLibraryExW GetModuleFileNameW InterlockedFlushSList ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW UnhandledExceptionFilter SetEndOfFile TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent RaiseException GetStartupInfoW GetLastError GetSystemTimeAsFileTime InitializeSListHead LocalFree FormatMessageA GetLocaleInfoEx SetCurrentDirectoryW GetCurrentDirectoryW CreateDirectoryW CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetDiskFreeSpaceExW GetFileAttributesW GetFileAttributesExW GetFileInformationByHandle GetFinalPathNameByHandleW GetFullPathNameW SetFileAttributesW SetFileInformationByHandle SetFileTime GetTempPathW AreFileApisANSI DeviceIoControl CreateDirectoryExW CopyFileW MoveFileExW CreateHardLinkW GetFileInformationByHandleEx CreateSymbolicLinkW TryAcquireSRWLockExclusive EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx InitOnceExecuteOnce CreateEventExW CreateSemaphoreExW FlushProcessWriteBuffers GetCurrentProcessorNumber GetTickCount64 FreeLibraryWhenCallbackReturns CreateThreadpoolTimer SetThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer CreateThreadpoolWait SetThreadpoolWait CloseThreadpoolWait GetStringTypeW CompareStringEx GetCPInfo InterlockedPushEntrySList

user32

SetClipboardData GetClipboardData EmptyClipboard OpenClipboard TrackMouseEvent GetMessageExtraInfo GetKeyState CloseClipboard GetKeyboardLayout GetCapture GetWindow GetWindowThreadProcessId EnumWindows SetWindowLongPtrW IsWindowVisible CallWindowProcW SetProcessDPIAware MonitorFromWindow LoadCursorW ScreenToClient ClientToScreen SetCapture SetCursor SetCursorPos GetClientRect ReleaseDC GetDC GetForegroundWindow IsWindowUnicode ReleaseCapture GetCursorPos

gdi32

DeleteObject GetDeviceCaps CreateRectRgn

shell32

ShellExecuteW

imm32

ImmGetContext ImmReleaseContext ImmSetCompositionWindow ImmSetCandidateWindow

d3dcompiler_47

D3DCompile

dwmapi

DwmGetColorizationColor DwmIsCompositionEnabled DwmEnableBlurBehindWindow

Name

.textbss

Size

Virtual Size

4.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

10.1MB

Virtual Size

10.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.1MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

419KB

Virtual Size

418KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

373B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

78KB

Virtual Size

78KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

quintcs2hackvshack.net.dll

ntdll

kernel32

user32

gdi32

shell32

imm32

d3dcompiler_47

dwmapi

generic